CVE-2026-14423: Type Confusion in Tint in Google Chrome prior to 150

Synopsis

A type confusion vulnerability in Tint, a graphics library component inside Google Chrome, allows a remote attacker to exploit the browser via a crafted HTML page. The CVSS vector (AV:N/AC:L/PR:N/UI:R/S:C) indicates the attack is delivered over the network, requires no authentication, and needs only a single user interaction such as visiting a malicious page. Successful exploitation gives the attacker full confidentiality, integrity, and availability impact with scope change, enabling a sandbox escape that breaks out of Chrome's renderer isolation. A patched-image rebuild at version 150.0.7871.46 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker delivers the exploit over the network; the target Chrome instance must be reachable in the sense that the user browses to an attacker-controlled or compromised URL.

• AuthenticationNot required

  No credentials or account are needed; any anonymous visitor to the crafted page is a valid target.

• Victim interactionRequired

  The victim must navigate to or open the crafted HTML page, making this a one-click social-engineering vector such as a phishing link or malicious ad.

• Attack complexityDetail

  Attack complexity is Low, meaning the exploit is reliable and requires no special race conditions, memory layout knowledge, or environmental prerequisites beyond the victim loading the page.

Blast Radius

• The attacker escapes Chrome's renderer sandbox, gaining code execution in a more privileged browser process outside the sandboxed context.
• With sandbox escape achieved, the attacker reads files, credentials, and session tokens accessible to the browser process on the host.
• The attacker writes or modifies data on the local filesystem or injects into other browser processes running under the same user account.
• The attacker can crash or destabilize the browser or dependent host processes, causing service disruption for the affected user session.